ChatGPT Scams: How To Protect Yourself in 2023

mapodile / Getty Images

Commitment to Our Readers

GOBankingRates' editorial team is committed to bringing you unbiased reviews and information. We use data-driven methodologies to evaluate financial products and services - our reviews and ratings are not influenced by advertisers. You can read more about our editorial guidelines and our products and services review methodology.

20 Years
Helping You Live Richer

Reviewed
by Experts

Trusted by
Millions of Readers

The introduction of Open AI’s ChatGPT, the generative AI program that can help with tasks ranging from creating meal plans to developing apps, has helped people across the world increase their productivity. Not surprisingly, it has also given rise to a new breed of ChatGPT scams trying to separate hardworking people from their personal information and their money.

Read: What To Do If You Owe Back Taxes to the IRS

What Are ChatGPT Scams?

ChatGPT scams run the gamut. From hackers using the AI to write phishing emails, texts or direct messages, up to fake ChatGPT websites that can install malware on your device. GOBankingRates dug deep to find six malicious ChatGPT scams — and some tips to help you protect yourself.

ChatGPT Writes Phishing Emails for Hackers

One thing ChatGPT does very well is write emails for marketing professionals and other time-strapped businesspeople. Unfortunately, it can also write effective phishing emails for hackers. What’s even more alarming is how convincing the emails might appear to be. These will have fewer or even none of the misspellings or poor grammar used to signal red flags from hacker emails.

To protect yourself, always check the actual email address. For instance, an email from Amazon will come from the amazon.com domain. Also, even if the email address looks legitimate, never click a link in an email. Instead, type the link URL into your browser to access it.

ChatGPT Sends Fake Direct Messages for Scammers

ChatGPT was designed to learn and evolve as it chats with people and can communicate very conversationally. This makes it the perfect app for scammers to use to send direct messages pretending to be someone they aren’t.

ChatGPT can be used in the common “Grandparent scams,” where a stranger on Facebook or another social media site messages an older adult pretending to be a grandchild or another beloved friend or relative.

Of course, it’s not only seniors who fall prey to this scam. If you ever receive a direct message from someone claiming to be a loved one and the story doesn’t seem to add up, call your loved one or another relative. Do not believe anyone on social media or in your text messages claiming to be a friend or relative who needs bail money, a wire transfer to pay medical bills, or gift cards for any purpose.

ChatGPT Can Develop Malware Code

ChatGPT can write compelling emails and text messages to scam people. It can also effectively write malware code.

Protect yourself from AI-generated malware the same way you protect yourself from any threats on your computer. Make sure you have up-to-date antivirus and malware software, don’t visit sites that are not secure or look suspicious, and don’t log into things like banking apps on unsecured public networks.

Fake ChatGPT Websites Steal Data and Install Malware

As ChatGPT grew in popularity, hackers took advantage of Web users that would Google the name of the platform, and created fake sites to steal data and install malware on machines.

To protect yourself, know that the official website of ChatGPT is https://openai.com. You can also access it through the app on your mobile device. Do not try searching for ChatGPT to find the site, because you may stumble on a scam site instead.

Phony ChatGPT Browser Extensions Steal Data

ChatGPT browser extensions can be helpful for streamlining your ChatGPT projects. But, just as phony ChatGPT sites cropped up across the Web, phony browser extensions seek to steal data or install malware.

Do not install any ChatGPT browser extensions unless you’ve thoroughly researched them and know they are the real thing. For instance, Merlin works with your browser allowing you to access ChatGPT from any website, while ChatGPT for Google allows you to use the platform side-by-side with search engine results. Be wary of extensions with misspellings, however. The extension “Chat GPT for Google,” with a space between the words “Chat” and “GPT” stole usernames and passwords from thousands of Facebook users before it was shut down this spring.

Fake ChatGPT Apps Ask for Subscription Fees and In-App Purchases

A variety of “fleeceware” apps have been discovered in Google Play and the App Store. These apps pose as ChatGPT or ChatGPT alternatives and offer a free subscription for a limited time. Once they have you hooked, they ask for in-app purchases or weekly or monthly subscription fees. For instance, the app Chat GBT offered three free chats and then tried to get users to pay a $10 monthly fee or $30 annual subscription fee, Wired reported this spring.

To protect yourself, understand how to cancel app subscriptions. You will still be charged if you delete the app from your device. Don’t opt into a paid service unless you are entirely sure what you are getting and know that it is legitimate. Read online reviews and talk to people familiar with AI apps before committing to any subscriptions. ChatGPT Plus costs $20 a month and can only be purchased through the official OpenAI app or online at openai.com

ChatGPT Name Used In Phishing Scams

The ChatGPT and OpenAI names are being used in a variety of phishing scams. You may receive an email that looks like it’s from OpenAI or ChatGPT saying that your ChatGPT Plus subscription has expired or your payment method failed or that you need to verify your ChatGPT account.

Again, don’t click any links in emails or reply to the email with any personal information. Instead, visit openai.com, the official website for ChatGPT and login to your account to see if a problem exists.

Final Take

OpenAI’s ChatGPT is a powerful tool for productivity. But, in the wrong hands, it can wreak havoc. Be cautious online and if a website, app, email or message seems suspicious, walk away.

Data is accurate as of Aug. 9, 2023, and is subject to change.

Editorial Note: This content is not provided by any entity covered in this article. Any opinions, analyses, reviews, ratings or recommendations expressed in this article are those of the author alone and have not been reviewed, approved or otherwise endorsed by any entity named in this article.

Share This Article: